Re: [Dovecot] Lots of pop3-logins

2009-06-27 Thread Timo Sirainen
On Fri, 2009-06-26 at 02:01 -0700, V S Rao wrote: Timo Wrote: You can also just decrease login_process_max_count Wouldn't decreasing the login_process_max_count simply create more problems. Now users will start experiencing timeouts sooner than before, because whatever is causing the login

Re: [Dovecot] Lots of pop3-logins

2009-06-26 Thread V S Rao
Doing a ps aux on my Slackware box, I have approx 100 PID's of pop3-login's going on. This is a production mail server, but it is getting VERY low traffic. In fact, only 3 people can pop3 into it. I've check their e-mail clients, and they are not checking mail any more

Re: [Dovecot] Lots of pop3-logins

2009-06-26 Thread Rodman Frowert
for Dovecot, let me know... Rodman - Original Message - From: V S Rao viriy...@yahoo.com To: j...@co.sapo.pt Cc: dovecot@dovecot.org Sent: Friday, June 26, 2009 4:01 AM Subject: Re: [Dovecot] Lots of pop3-logins Doing a ps aux on my Slackware box, I have approx 100 PID's of pop3

Re: [Dovecot] Lots of pop3-logins

2009-06-26 Thread Charles Marcus
On 6/26/2009, Rodman Frowert (rod...@thefrowerts.com) wrote: If anyone wants to see the fail2ban config file I am using for Dovecot, let me know... Does it also work for IMAP ligins? I'd like to see it regardless... thanks! -- Best regards, Charles

Re: [Dovecot] Lots of pop3-logins

2009-06-26 Thread Rodman Frowert
but the dictionary attack the other day showed as Aborted login. Rodman - Original Message - From: Charles Marcus cmar...@media-brokers.com Cc: dovecot@dovecot.org Sent: Friday, June 26, 2009 8:57 AM Subject: Re: [Dovecot] Lots of pop3-logins On 6/26/2009, Rodman Frowert (rod

[Dovecot] Lots of pop3-logins

2009-06-25 Thread Rodman Frowert
Hello, Doing a ps aux on my Slackware box, I have approx 100 PID's of pop3-login's going on. This is a production mail server, but it is getting VERY low traffic. In fact, only 3 people can pop3 into it. I've check their e-mail clients, and they are not checking mail any more often than

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Jose Celestino
On Qui, 2009-06-25 at 09:07 -0500, Rodman Frowert wrote: Hello, Doing a ps aux on my Slackware box, I have approx 100 PID's of pop3-login's going on. This is a production mail server, but it is getting VERY low traffic. In fact, only 3 people can pop3 into it. I've check their e-mail

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Rodman Frowert
25, 2009 9:34 AM Subject: Re: [Dovecot] Lots of pop3-logins On Qui, 2009-06-25 at 09:07 -0500, Rodman Frowert wrote: Hello, Doing a ps aux on my Slackware box, I have approx 100 PID's of pop3-login's going on. This is a production mail server, but it is getting VERY low traffic. In fact

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread V S Rao
Hello, Doing a ps aux on my Slackware box, I have approx 100 PID's of pop3-login's going on. This is a production mail server, but it is getting VERY low traffic. In fact, only 3 people can pop3 into it. I've check their e-mail clients, and they are not checking mail any more often

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Jose Celestino
On Qui, 2009-06-25 at 10:01 -0700, V S Rao wrote: Hello, Doing a ps aux on my Slackware box, I have approx 100 PID's of pop3-login's going on. This is a production mail server, but it is getting VERY low traffic. In fact, only 3 people can pop3 into it. I've check their e-mail

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Dave McGuire
On Jun 25, 2009, at 10:07 AM, Rodman Frowert wrote: Doing a ps aux on my Slackware box, I have approx 100 PID's of pop3-login's going on. This is a production mail server, but it is getting VERY low traffic. In fact, only 3 people can pop3 into it. I've check their e-mail clients, and

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread V S Rao
Doing a ps aux on my Slackware box, I have approx 100 PID's of pop3-login's going on. This is a production mail server, but it is getting VERY low traffic. In fact, only 3 people can pop3 into it. I've check their e-mail clients, and they are not checking mail any more often

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Timo Sirainen
Sent: Thursday, June 25, 2009 1:15 PM Subject: Re: [Dovecot] Lots of pop3-logins Doing a ps aux on my Slackware box, I have approx 100 PID's of pop3-login's going on. This is a production mail server, but it is getting VERY low traffic. In fact, only 3 people can pop3

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Rodman Frowert
PM Subject: Re: [Dovecot] Lots of pop3-logins

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Dave McGuire
On Jun 25, 2009, at 3:46 PM, Timo Sirainen wrote: You can also just decrease login_process_max_count. If Dovecot reaches the limit, it'll just start killing off old connections that haven't logged in. I don't see this option in my dovecot.conf. Was it added after 1.1.6?

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Jose Celestino
On Qui, 2009-06-25 at 11:15 -0700, V S Rao wrote: Doing a ps aux on my Slackware box, I have approx 100 PID's of pop3-login's going on. This is a production mail server, but it is getting VERY low traffic. In fact, only 3 people can pop3 into it. I've check their e-mail clients,

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Noel Butler
On Thu, 2009-06-25 at 15:46 -0400, Timo Sirainen wrote: You can also just decrease login_process_max_count. If Dovecot reaches the limit, it'll just start killing off old connections that haven't logged in. What would be nice is, an anti brute force option, like xinetd, X-number of

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Kenneth Porter
--On Friday, June 26, 2009 8:48 AM +1000 Noel Butler noel.but...@ausics.net wrote: What would be nice is, an anti brute force option, like xinetd, X-number of connections from Y i.p. in Z seconds (optional setting of course) or maybe a way to extend that to detect if the same i.p is retrying

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Timo Sirainen
On Fri, 2009-06-26 at 07:48 +1000, Noel Butler wrote: What would be nice is, an anti brute force option, like xinetd, X-number of connections from Y i.p. in Z seconds (optional setting of course) or maybe a way to extend that to detect if the same i.p is retrying constantly using different

Re: [Dovecot] Lots of pop3-logins

2009-06-25 Thread Noel Butler
On Thu, 2009-06-25 at 18:31 -0400, Timo Sirainen wrote: On Fri, 2009-06-26 at 07:48 +1000, Noel Butler wrote: What would be nice is, an anti brute force option, like xinetd, X-number of connections from Y i.p. in Z seconds (optional setting of course) or maybe a way to extend that to